MyDLP - Forum

Subject: Information Classifications or Content Types - by: iBog

iBog — Sun, 23 Jan 2011 08:14:00 +0100

Datalossdb.org uses the following data types when tracking data breaches.

CCN Credit Card Numbers
SSN Social Security Numbers (or Non-US Equivalent)
NAA Names and/or Addresses
EMA Email Addresses
MISC Miscellaneous
MED Medical
ACC Account Information (Financial)
DOB Date of Birth
FIN Financial Information

Another grouping would be the actual regulation.

Maybe it would be useful to create a repository of sample forms used to collect this information so we can determine if there are similarities in field names or the information gathered. Although phone numbers are common they may be easy to find. Does MyDLP identify phone numbers and use this in any analysis?

Subject: Forum suggestion - by: iBog

iBog — Sat, 22 Jan 2011 23:09:34 +0100

Great project! I've been working in information security for about 15 years now and lately spending more time with DLP.

I'd love to suggest a "general" area on the forum for discussing DLP and techniques and not necessarily support for one of the components.

Downloading the VM now to see how it works. I'm very interested in contributing to the detection rules. Any thoughts on detecting passwords, health records or custom account numbers?

Subject: End Point linux suport - by: Freitas

Freitas — Thu, 20 Jan 2011 07:36:02 +0100

mydlp supports the end point for other distros? I saw nothing about this in the documentation....